Vendors / Institutional Management Website Project Institutional Management Website Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Institutional Management Website Project records in CISA KEV No Institutional Management Website Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00872 · Published 2023-02-08 · No fix listed CWE-434
Priority HIGH 82
SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01751 · Published 2023-02-08 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
2 0 0 0 0
